Bypass
The challenge step finishes inline.
A bank prompt is not the problem. The problem is the redirect that resets the cart. The extension completes the authentication step while the checkout stays mounted, so the session survives.
Runs on any checkout page you already open. Reversible in one deploy.
How it works
Detect the challenge
The checkout signals that a challenge step is needed, and the extension reads the intent it already created.
Complete the step
The issuer's authentication step is completed without tearing the checkout down or reloading the page.
Confirm the result
The authentication result is submitted and the checkout advances in the same session.
Poll to settle
The intent is polled until it reaches its final state, and the gateway's own status is what appears.
The challenge is completed on the checkout's behalf; the gateway's own status is what gets reported.
Mounted, not remounted
Most challenged payments fail because the page reloads, not because the customer abandons. Keeping the checkout mounted is the whole trick.
- No page reload
- No cart reset
- One confirmation afterwards
Five stages, all recorded
Detect, authenticate, poll, probe and relay. Each stage is written into the trace with its HTTP code, so a stuck run has an address.
- Detect · host read
- Authenticate · http 200
- Poll · final status
- Relay · POST result
Questions about this one.
More on the full FAQ, or write to [email protected].
01What if the issuer rejects the authentication?
The extension reports the issuer's own message and decline code. It does not invent a success when the issuer demanded a real approval.
02Does it change liability?
No. Liability shift rules are the issuer's, and the extension does not alter who carries the risk.
03Can I force a failing result?
Yes. The Force ACS fail switch drives a failing authentication result, which is useful for testing the failure path.
Inline authentication
Keep the cart through the bank prompt.
Run a challenged card through one checkout and watch the trace end at a settled intent with a relay POST.
- No page reload
- Outcome recorded
- Relay POST shown